Using Risk Analysis to Evaluate Design Alternatives